Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Critical Vulnerability in WatchGuard Firebox Under Exploitation

Successful exploitation of CVE-2025-14733 could allow a remote unauthenticated attacker to execute code remotely.

Threat ID:
CC-4733
Threat Severity:
Medium
Published:
19 December 2025 1:25 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Successful exploitation of CVE-2025-14733 could allow a remote unauthenticated attacker to execute code remotely.

Threat details

CVE-2025-14733 Under Exploitation

WatchGuard has reported that CVE-2025-14733 in the Fireware OS used by Firebox is under exploitation. Successful exploitation can allow a remote unauthenticated attacker to execute arbitrary code on the Firebox appliance.

The NHS England National CSOC assesses further exploitation as likely.

Introduction

WatchGuard has released security updates to address a critical vulnerability in the Fireware operating system used by Firebox devices.

  • CVE-2025-14733 - Out-of-Bounds Write Vulnerability - CVSSv4 score: 9.3

Remediation advice

Affected organisations are strongly encouraged to review WatchGuard security advisory WGSA-2025-00027 and apply the relevant updates as soon as possible.

Last edited: 19 December 2025 1:25 pm